search

ladar / sedutil

Use sedutil for setting up and using self encrypting drives (SEDs) that comply with the TCG OPAL 2.00 standard. This includes the requisite pre-boot authentication image.
https://trustedcomputinggroup.org/work-groups/storage/
80 stars 24 forks source link

AMD Ryzen Mobile 3700u PBA and Rescue - No Boot #5

Open ChubbyAnt opened 5 years ago

ChubbyAnt commented 5 years ago

Goal: Use Sedutil to lock a 2TB 970 Evo via PBA, booting into Windows 10 Pro.

I have an HP 15M-DS0012DX, Envy x360 2 in 1 with the AMD Ryzen 3700u. This laptop does not play nice with Linux. The only Linux OSes I am able to boot with this machine are the latest builds Manjaro Arch builds, as described here:

https://forum.manjaro.org/t/help-with-hp-envy-x360-15-ds000cto-ryzen-7-3700u/98906

Interestingly, where Ubuntu, Kubuntu et al will not even boot, Manjaro works nearly flawlessly. The Sedutil PBA and Rescue images will not boot. I have been trying to modify the buildroot makefile to create newer versions of the Linux PBA, but without success yet.

Using Manjaro via bootable USB, I am able to run sedutil-cli and process all commands, but without the PBA this does not get me anywhere.

Has anyone been down this road?

ChubbyAnt commented 5 years ago

I fixed this issue by creating an AMD Ryzen friendly sedutil fork.

https://github.com/ChubbyAnt/sedutil

This fork successfully creates the UEFI64 image and RESCUE64 image that works for preboot encryption on the HP 15M-DS0012DX, Envy x360 2 in 1 with the AMD Ryzen 3700u and a Samsung 970 Evo 2TB.

Note: during initial setup, the drive responded with NOT_AUTHORIZED. Running PSID revert did not destroy the data on the drive. After running PSID revert, the sedutil setup proceeded normally.